Akira ransom software, Sonicwall SSLVPN re -targeting the security vulnerability leaks to the networks

Akira ransom software group has started to use the CV-2024-40766 vulnerability in Sonicwall SSLVPN products.

Sonicwall released an update in August 2024 for the security vulnerability and announced that weakness was actively exploited.

Australian Cyber ​​Security Center (ACSC), the warning issued on September 10, announced that the institutions in the country were targeted by Akira.

The attacks were found to be connected to VPN via Sonicwall devices via “Default Users Group ve and the assumed general access permits for the“ Virtual Office Portal ”.

In the Cyber ​​Security Community, allegations that the attacks were due to a new “zero day” deficit had come up.

The company reported that it examined about 40 incidents in connection with this security vulnerability last month.

• Gen 5: SOHO cihazları (5.9.2.14-12o ve öncesi)

• Gen 6: TZ, NSA ve SM modelleri (6.5.4.14-109n ve öncesi)

• Gen 7: TZ ve NSA modelleri (7.0.1-5035 ve öncesi)

System managers are advised to follow the recommended steps in Sonicwall's security bulletin.

Kaynak: Beykozun Sesi